Search Operators
Search Operators (Google Dorking) Cheatsheet Type: Passive reconnaissance using advanced search-engine operators to surface exposed files, directories, credentials, subdomains, and metadata without touching the target Core Operators Operator Description Example site: Restrict results to a domain site:example.com inurl: Term appears in the URL inurl:admin intitle: Term appears in the page title intitle:"index of" intext: Term appears in the body text intext:password filetype: / ext: Restrict to a file extension filetype:pdf cache: Show Google’s cached copy cache:example.com related: Find similar sites related:example.com link: Pages linking to a URL (deprecated/limited) link:example.com define: Dictionary definition define:reconnaissance AROUND(n) Terms within n words of each other admin AROUND(3) password Operator Modifiers Modifier Description Example "..." Exact phrase match "confidential" - Exclude a term site:example.com -www OR / | Logical OR site:example.com (filetype:pdf OR filetype:docx) AND Logical AND (implicit) intitle:login AND inurl:admin * Wildcard / placeholder "username * password" ( ) Group terms site:example.com (admin OR login) .. Number range "budget 2020..2024" “all” Variants Operator Description allintitle: All following words must be in the title allinurl: All following words must be in the URL allintext: All following words must be in the body allinanchor: All following words must be in anchor text Note: all* operators don’t mix well with other operators — use the single-term versions (intitle:, inurl:) when combining. ...